lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
Open Source and information security mailing list archives
| ||
|
Date: 7 Dec 2007 19:25:02 -0000 From: jaakkoNOSPAM@...PAMritke.fi To: bugtraq@...urityfocus.com Subject: Kvaliitti WebDoc 3.0 CMS SQL Injection vulnerability Found by: Jaakko "Chrysalid" Hartikainen 1. Info Kvaliitti WebDoc 3.0 CMS is a proprietary Finnish-made content management system developed by Kvaliitti Oy (http://www.kvaliitti.fi). It is driven by MS SQL Server and ASP. 2. Abstract WebDoc 3.0 suffers from a flaw in input validation, which allows attackers to insert malicious SQL queries into an existing one, possibly gaining complete control over an affected system. 3. Vulnerable files & PoC: categories.asp, subcategory.asp, document_id, cat_id This proof of concept example exposes the internal server variable called "@@version": http://www.vulnerable.tld/categories.asp?document_id=37&cat_id=convert(int,(select+@@version));-- 4. Misc Vendor notified: yes --
Powered by blists - more mailing lists